Privacy Policy

1. Who We Are

Nova is operated by CIVAI. For privacy-related questions, contact us at hello@civai.co or visit https://civai.co. The Service website is https://nova.civai.co.

2. Information We Collect

We may collect the following categories of information:

2.1 Account and identity information

• Name and email address used to create or sign in to an account
• Authentication and session data (including OAuth / single sign-on where offered)
• Profile and account preferences you choose to provide

2.2 Agent, conversation, and content data

• Agents you create or configure, including prompts, tools, settings, and metadata
• Conversation messages, uploads, files, and other content you submit to the Service
• Outputs generated by agents or models at your direction

2.3 Connected accounts and integrations

• Credentials, tokens, and metadata needed to connect third-party services you authorize (for example Google, social platforms, messaging, or CRM tools), stored using encryption where applicable
• API keys, publishing grants, expirations, and revocation status you create or manage
• Integration activity and outcomes needed to operate connected features on your behalf

2.4 Usage, device, and technical data

• IP address, browser type, device information, and approximate location derived from technical signals
• Log data such as timestamps, request paths, error reports, and authenticated API activity
• Feature usage patterns (for example agent runs, credit consumption, and integration use)

2.5 Payment and credits

• Credit balances, transactions, action types, and related billing metadata
• Payment processor information as needed to fulfill purchases (card details are typically handled by our payment providers and not stored by us in full)

2.6 Information from third-party and public sources

When you run agents or connected features, the Service may retrieve publicly available web content and data from third-party APIs (for example search providers, AI model providers, and platforms you connect). That content may include names, usernames, posts, and other information already public online. We process such data to provide the Service you requested.

3. How We Use Information

We use information to:

• Provide, operate, secure, and improve the Service
• Authenticate users, manage sessions, and prevent abuse or fraud
• Run AI agents, tools, and automations at your direction
• Enable integrations, APIs, and publishing or messaging features you authorize
• Process credits, subscriptions, invoices, and customer support requests
• Send transactional emails and service notices
• Monitor performance, debug issues, and maintain auditability of account activity
• Comply with legal obligations and enforce our Terms of Service
• Create aggregated or de-identified insights that do not reasonably identify you, to improve products and services

4. Legal Bases (Where Applicable)

If you are in a jurisdiction that requires a legal basis for processing (such as the EEA/UK), we rely on one or more of: performance of a contract (providing the Service), legitimate interests (security, improvement, fraud prevention), consent (where required), and legal compliance.

5. How We Share Information

We may share information with:

• Service providers that help us operate the Service (hosting, email delivery, AI and search providers, media or messaging infrastructure, payment processors, analytics and error monitoring), under contractual confidentiality and use limitations
• Third-party platforms you connect when you authorize access, publish, message, or otherwise use integrations
• Professional advisors and authorities when required by law, subpoena, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections

We do not sell your personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising except as disclosed and permitted by law.

6. AI, Agents, and Automated Processing

Nova uses artificial intelligence, agents, tools, web research, and automation. Inputs you provide and content retrieved from public or third-party sources may be sent to model and infrastructure providers to generate outputs or take authorized actions. You are responsible for ensuring you have the rights to submit content and to use outputs in accordance with applicable law and third-party terms. AI outputs may be inaccurate or incomplete; do not treat them as professional advice.

7. Cookies and Similar Technologies

We use cookies and similar technologies for authentication (including session cookies), security, and essential Service functionality. You can control cookies through your browser settings; disabling certain cookies may prevent login or core features from working.

With your permission we also use Microsoft Clarity for product analytics, which records how pages are used and sets the _clck, _clsk, _uetmsclkid and _uetvid cookies. These do not load until you accept them in the cookie notice, and declining leaves the Service fully usable. Your choice is stored in a first-party civai_consent cookie for 180 days, separately for each of our sites, and you can change or withdraw it at any time from Cookie settings in the sidebar.

8. Data Retention

We retain account, agent, conversation, credit, integration, and activity data for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. When you delete content or disconnect integrations, residual copies may remain in backups for a limited period.

9. Security

We implement administrative, technical, and organizational measures designed to protect information, including access controls, encrypted transport where appropriate, and encrypted storage of certain credentials. No method of transmission or storage is completely secure; you use the Service at your own risk and should protect your login credentials and devices.

10. International Transfers

We may process and store information in the United States and other countries where we or our providers operate. Those locations may have data-protection laws different from your jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

11. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority. To exercise rights, email hello@civai.co. We may need to verify your identity before responding. You may also stop using the Service, revoke API keys, and disconnect integrations from your settings where available.

12. Children's Privacy

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

13. Third-Party Links and Services

The Service may link to or integrate third-party websites and platforms. Their privacy practices are governed by their own policies. We are not responsible for third-party content or practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last Updated" date and, where appropriate, by notice through the Service or email. Continued use after changes become effective constitutes acceptance of the updated Policy.

15. Contact

For questions about this Privacy Policy, contact:

Email: hello@civai.co
Website: https://nova.civai.co

Effective Date: January 2025 · Last Updated: August 2026